Summary

Experience in Information Technology audit, compliance assurance and Network security, responsibilities includes plan, manage and execute IT audit & application and system security review in compliance with organizational internal policies, procedures and ISACA standards, guidelines, ISO 270001, 27002, ITIL service management, CoBiT 5 framework. These assignments includes review of general IT controls ITGCs, application controls, compliance testing, risk assessment and continues RnD. Governance, Risk and Compliance (GRC)

Major assignments includes the following areas:

• Information Technology Governance
• IT Service Delivery and Support
• Physical , Logical and environmental security
• System development and change management
• Security of information assets (infrastructure,
data and server etc.)
• Business continuity and disaster recovery
• Risk Management.
• Continual Process Improvement

Specialties: Management systems auditing, consulting, information security, IT Service management, BCM / DRP, ITSM, ISMS, PCI/PA DSS, HIPPA EDSS, Governance, Risk and Compliance

Projects

All Bank Projects

Experience

Company Logo
Manager IT/IS Audit
MCB Islamic Bank Limited
Dec 2017 - Present | Lahore, Pakistan

Company Logo
Assistant Manager - IT/IS & Overseas Audits
Bank Alfalah Limited
May 2009 - Dec 2017 | Lahore, Pakistan

Carried out Information system and security audit of Bank

Education

Catalyst
Certification, PCI DSS‎
Payment Card Industry Data Security Standards
Completed
2019
Tranchulas
Certification, Certified Penetration Testing Professional‎
Ethical Hacking
Completed
2019
ISACA - Certified Information Systems Auditor (CISA)
Certification, CISA‎
Information System
Completed
2018
CQI IRCA
Certification, ISMS-LA ISO27001‎
Information Security Management System
Completed
2017
AXELOS
Certification, ITIL‎
Information Technology Service Management
Completed
2016
Virtual University of Pakistan
Masters, Masters in Science, Masters in Information Technology‎
Computer Science
CGPA 2.5/4
2016

Skills

Expert Information Security
Expert IT Audit, System Security
Expert IT Service Management
Expert Sector Development

Languages

Expert English